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[57] ABSTRACT 

An object tracking, communication, and management sys- 
tem for a l^op computer or similar device, wherein a 
beacon or transceiver in the con^uter implements file integ- 
rity or device recovery steps. TTic beacon protects data, or 
transmits files ch* data from computer storage back to the 
owner or authorized party, either automatically or in 
response to a request for data recovery, and may tnx>adcast 
a signal for tracking and recovery of the conqMiter after a 
theft. Preferably the system also operates in a nonnal mode 
to provide or acquire files or data, to or from a remote 
location, as cither requested by the operator or by a third, 
calling or transmitting party, or automatically, for n(»inal 
communications or data upke^. When activ^ed as a secu- 
rity device it implements strategic machine control including 
enabling, disabling, or modifying functions of the computer 
and communication of data. The system includes a beacon 
with preferably both a transmitter and a receiver, internal 
security logic, and external system elements for locating the 
beacon via ei&er RF tracking or die communication of its 
position coordinates back to the owner via the transmitter. A 
combination of hardware and/or software within the beacon 
and the host system initiates and coordinates operation of the 
aforementioned conununications or security features. 
Tamper detection logic implemented in software or hard- 
ware responds to taiiq>ering or removal of the beacon or 
other components by aleiting via the transmitter and/or 
disabling functionality of the host Preferably low level 
codes operate at the bios level to assure effective operation 
even when higher level software or plug-in components 
have been overridden or removed. 

18 Claims, 6 Drawing Sheets 
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DEVICE SECURITY SYSTEM neither readily detected nor easily removable. In that posi- 

tion it includes or controls a communications link which is 

FIELD OF THE INVENTION prefexably a two-way RF link, such as a ccUular phone link. 

This invention relates to a system for locating, coramu- « security module operates or controls the device to 

nicating with and managing expensive assets and in paiticu- ^ initiate or perform object location and file integrity or data 

lar laptop computers and other portable electronic devices security functions. 

dial include a microprocessor and menaory. The security module includes file (Lc., data) security and 

device security functions, which are initiated upon receipt of 

BACKGROUND an actuation signal indicating theft of the computer, and 

As conigjutcrs and other expensive consumer electronic which thereafter utilize battery power firom the loop's 

devices become smaller and more portable, the risk of their POwer pack and available resources to preferentially imple- 

bcing stolen increases dramatically. Of particular concern is integrity and tracking/alarm functions. Preferably 

the rising rate of lapt<^ computer theft Recent reports disables certain portions of the computer to conserve 

indicate that l^top computas arc being stolen at the rate of P^"^^ * priority tasks. The actuation signal 

1500 a day in the United States alone, and account for almost preferably a broadcast signal, sent over a regional area 

a billion dollars in losses annually. Even more important ^ncc the owner learns that the conq?utcr has been stolen; 

than &e actual dollar value of losses posed by this trend is however actuation may also be triggered by an internal 

the potentially devastating loss of the ductal inf cnnalion alarm condition, for example a signal indicative that the user 

and data files contained on the stolen computers. Presently, failed to enter a required code or has attempted to 

business people store everything from addresses to corporate ^ remove ot disable a component The file integrity or 

secrets on their laptop computers, and loss of this data can tracking/alarm functions preferably include at least one and 

be of a magnitude to make fee loss of the computer hardware p-cferably more of the operations of teoadcasting out critical 

itself seem insignificant It has even been reported that destroying ex encrypting files, and transmitting a 

foreign govffoments hire spies to steal the laptops of Fot- tracking RF signal such as a cellular phone signal with a 

tune 500 employees in wdcr to obtain corporate secrets. " code or message identifying the stolen computer. 

Solutioiis are needed fo^^^^ BRIEF DESCRIPnON OF THE DRAWINGS 
Unfortunately the approaches that have m the past been 

directed to the recovery oi stolen items have proved too FIG. 1 illustrates a beacon-equipped laptop computer in 

inqiractical to be effective against this problem. Solutions ^ acccixlance with the present invention; 

like those offered for automobiles, inccsporating large ttans- p|Q 2 illustrates a physical layout of the beacon in one 

mitters or GPS receivers and position data transmitters, arc embodiment of tiie invention; 

too unwieldy for mwirporation in a laptop or their imple- 3 ^^^^ ^ ^ embodiment of the 

mentauon would be economi<^y prohibiUye or result in ^^^^^^^ communicating via celM^telephone; 

poor performance when located withm a building. _ . * . . , 7 . , 

^ . , . ^ " FIG. 4 illustrates mterconnection of me beacon m a laotoD 

A number of security systems d^ned parttculariy for ^^^^ j^, intacomiections with various paits^the 

laptop conqwters have not been effective. Alarms and ^ »^*«» imcic^«,uuij» wiui v«iuu> pan* wi uic 

motion sensors are susceptible to false alarms which may ^ conspu sys m, 

quickly frustrate the user into not using diem. Additionally, ^ ^^^^ a cut-away view of a laptop compnict with 

these devices do nothing after the con^niter is stolen. 40 l>cacon and an antenna inside; and 

Software solutions which control the computer to automati- FIG. 6 illustrates another embodiment of the invention 

cally dial up a predetermined number have shown limited configured to perform security and recovery within a paging 

effectiveness, probably because they can easily be removed network. 

or because they simply do not function if the stolen com- 

puter is not plugged into a phone line. 45 DETAILED DESCRIPTION 

SUMMARY OF THE INVENTION ^T!^* ^^^^J^ embodiment of the present invention 

addresses the foregoing problems usmg an existmg cellular 

These and other problems are addressed by the system telq)hoDe network to provide a novel and cost-effective 

and devices of the }^esent invention for the location, com- solution to the {xoblem of l^op theft while at the same time 

munication with, and management of small electronic 50 providing a complete two-way mobile communications and 

devices, especially laptop computers but also other asset management system. In this embodiment a beacon 

microprocessor-containing devices or instruments. For sim- cocqsrised of a cdlular transceiver and a modem is installed 

plicity laptop embodiments are discussed. A tampeqroof in the laptop conqxiler cr electronic device which is to be 

beacon unit including a Iranqxsnder or transceiver is placed protected, in such a way that removal or disabling of its 

widiin the 1^(9 con^xiter. Under normal circumstances the 55 operative elements is difficult or wiU impair the normal or 

beacon inq>lements a standard communication function for usefid c^^eration of the computer. The transceiver is config- 

the general communications needs of die device such as urcd in a manner known in the art to send and receive data 

e-mafl , voice, data, fax, internet or other communication or programs, so as to implement die general communica- 

task. When theft of the computer occurs, however, the tions and management needs of the end-user under noxmal 

beacon is activated with a security control program to secure 60 drcumstanoes; but it is also configured as described further 

crucial data in the compter's storage, to enable or disable below for data recovery or the tracking of the conq)uter after 

functions of the computa, and to either transmit or destroy a theft, in which case it operates to expedite reUim of the 

or hide sensitive data. The beacon's transmission signal is stolen computer and preferably also transmit ln4x>rtant data 

preferably also trackablc to locate and recover the stolen to the ri^tfiil owner; to protect die integrity of the data 

con^Mitcr. 65 contained on the machine; to assist in die capture of the 

In one embodiment the device resides in a l^op com- thief; and to serve as a deterrent against thefL This operation 

puter and is largely incorporated in the mother board so it is substantially enhances value, yet is achieved at little addi- 



01/28/2003, EAST version: 1.03.0007 



5,748,084 

3 4 

tional premium over the cost of the basic communications tions 70, 72 to the host computer and its phone and 

hardware. Implcmcnlation of such security features takes microphone jacks 81, 82. 

several forms in different embodiments of the invention jhc beacon may be implemented in a removable package 

described below. that communicates with the l^top processor or various 

FIG. 1 shows a beacon equipped laptop conqjutci IM of 5 sybsystcms thereof via a cryptogra^c exchange, to eflfec- 

thc present invention configured for operating within a tivety prevent unauthwized ranoval or bypassing of its 

tenestrial ceilular nrtworic rqjrcsented by relay station 110. security logic. As discussed more fully bdow. various power 

Mobile communications of all types are relayed between the or device control signals may be routed througji or fiom the 

laptop computer and the local cellular transceiver. Such beacon, such that it disables parts ci the laptop when the 

communications may consist of voice, data, faxes. e-maiL device is stolen, for example by erasing the hard disc, 

pages, file transfers etc. and may be initiated by cither the removing the drive power, or otherwise. It may also initiate 

laptop computer user or a calling party. Thus in this a locally detectable alarm, such as an alarm sound or a theft 

embodiment, the con^uter contains a cellular phone message displayed on the screen. 

transceiver, and this transceiver is activated by various As shown in FIG. 4 and FIG. 5 the beacon is built-in to 

voluntary or automated ^plications, to efi'ect the above- the computer 100 and has access to various system resources 

enumerated conmiunications functions in a maimer known such as the hard drive 102 and the battery 164. Preferably, 

in the art. That is. it may be manually initiated by a user as shown, the battery power for Che laptop is routed tfarou^ 

calling out connecting to another con^Nitcr or network, and the beacon, which controls a switch to cut power to the 

sending or receiving data, or it may include software of a con^uter 100 or various subsections thereof. The beacon 

type known in the art to effect automatic file transfer and 20 coomuinicates with the computer via the I/O logic 108 and 

data backup with a remote host or network, at scheduled the beacon has connections to the interface ports 112 of the 

intervals. The substantial functionality implemented in this computer, e.g.« to the phone jad^ and microphone jack on the 

embodiment of the invention allows the major hardware back of the computer. In addition, as shown in FIG. 5, the 

con^ments to be subsumed under the cost of a necessary antenna 60 for the beacon 101 is incorporated into the design 

hardware accessory application, such as a cell modem file ^ for the computer allowing many possibilities for different 

saver, for whidi the high cost is acceptable for many users antenna configurations. In particular, the antenna may be 

and the marginal cost of the security-specific hardware and formed by suitably-dintkensioned conductive paths on a flex 

software for implementing the invention, described further circuit or by metal tape adhered to the laptc^ housing or 

below, is low. cover, or otherwise positioned to enhance its sensitivity 

As noted, the security system includes a cellular phone RF ^ and/or improve its reception or operatioa Preferably, a 

communications assembly. This device transmits radio simple circuit coupled to die antenna confirms antenna 

waves so that an external tracking circuit may piigx>int the integrity, Le., provides an internally-detected alarm indica- 

location of the device by suitable detection e.g., using a tion if the antenna is cut or removed, 

two-point mobile receiver/signal comparatOT such as a direc- n is envisioned that the beacon itself l>e permanently 

tional finder mounted in a police vehicle. For a cellular- attached to the computer, however it is possible that for the 

based system such tracking can be effected largely auto- purposes of upgrading its funcCionaEty it may be made as a 

matically using existing cellular technology which noonitors removable chip or assembly. 

broadcast i.d. and signal strength in each cell, supplemented j^j additional security is preferably adiieved 

with the detaUed signal evaluation sudi as is employed for ^ configuring the beacon such that the computer does not 

example for triangulating firom cells to pinpoint the source function properly without the beacon in place. The invention 

of emcigency (911) cellular tcl^honc calls. FIG. 1 also contemplates several ways of iii5)lemcnting this (^wxation, 

illustrates a tracking apparatus 120 for locating the lq>top including logic verification of hard-wired cwmection or 

oon^Miter by monitoring its RF transmissions emanating function of critical components, such as by an antenna check 

from the beacon. These RF signals may be followed to track circuit as described above. In an alternative embodiment of 

the computer to its new location. invention, the beacon is contained in a removable 

If the computer is stolen the beacon is advantageously PCMCIA card or other iq>gradable type of package in 
also activated to secure its data. This is done in one ox more combination with firmware or other logic which assures that 
of several ways; it operates to recover or destroy important only authorized users can remove it or diange it. In such an 
data, or to disable the computer. The particular security ^ embodiment, when the PCMCIA or other upgradable pack- 
measures to be effected may be set in advance, or may be age is removed by an unauthorized person, the conqxitcr 
controlled by an external communicatioD. in which case the ceases to function, rendering it valueless. Such operation 
user or law-enforcement authorities may make the decision nuy be implemented by using access control software which 
as to which of these steps is appropriate. inf(xms the computer through password verification that an 

A physical design of the preferred cihbodiment is illus- 53 authorized person is removing or upgrading the t>eacon. The 

tiatcd in FIG. 2. Key aspeOs of this design are the integra- beacon may also contain a serial number or other identifi- 

tion of device conq)onents, having small size and low- cation mechanism to infoim&e host computer of its identity, 

profile packaging into the layout of existing laptop computer In other or further tamper jsotection implementations, when 

designs. FIG. 2 illustrates a small hytirid-packaged beacon the beacon determines that the antenna has been destroyed 

101 using a loop antenna 102 integrated into the con^uter ^ or tan5)ered with, it actuates its various internal security 

housing. I^otocols described bdow. 

In general, a cellular embodiment of the beacon is com- In additional embodiments, the invention contemplates a 

prised of the various circuit dements shown in FIG. 3. These system wherein an external (Ration stimulus is provided to 

indude a ceilular transceiver 10, a data modem 20, a ensure that the beacon is in jdacc and operating normally, 

back-up battery 25, a microproccssar 30, memory 40, addi- 65 This external stimulus may be, for example, a periodic radio 

tional security logic 45, a phone line interface 50, a micro- or tdq>hone message from outside which resets or enables 

phone and speaker interface 55. an antenna 60, and connec- the computer for twenty-four hours. In that case, when the 
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confute! is repented stolen, this external message is control codes unplement at least some of the security 

withheld, and failure to receive the message initiates the features of the device. Such features may include the dis- 

compiete disabling of the computer; i.e.. the beacon shuts abling (x inlcnuption of power to aU or to specific parts of 

the conq)uter down when it has not received an authorization the conqjuter, the sounding of an alann. or the erasure (rf the 
call via cellular telephone within a twenty four hour interval 5 hard drive. The invention also contemplates the provision of 

In other embodiments, the security device may also be »curity codes which instnjct the beacon to initiate a 

triggered by actual receipt of a message broadcast by the file-transfer call, m whi(^ case the miaoproc^sor stores m 

uscTindicating theft A similar triggering condition may be ^f^^ ^Tf^ or types of files to be txajjsfeired and the 

f T^nT^ ^ . • — telcDhone number, fax number ts e-mail address to wliicn 

unpleraeoted by use of the CDPD netwoik to require a user .u c "v—T ,, ^. - ^ 

tXgontothelaptopandacquiresessiontickciraswiththe lO ^ tranrf«ied, as well as Ae time for 4e 

KH^EROS sy^«i for exLple. »° ^ imnojxocessor then signals the 

' ^ . , ^ ^ host conmuter s low level beacon mterface software to 

In addition to the hardware commumcations beacon, the transfers. Some of the low level security code 

system also includes interface software present on the l^op functions are pcrf onned by the security logic which may 

conmuter whidi i^ovidcs tiie user interface widi the com- impicment power switching and other simple hardware 

munications and management features of the beacon and controls 

provides a for the user ^ access all of the featoes of .^'^^ ^^^^ ^ distinguished from 

the beacon. C«tam aspects of the software are preferably ^thc^ higher level codes tfit are interpreted by L high-level 

mcoiporated mto Ae laptop cor^uto s bi^ m firmware for ^ low-leveJ^s is 

reasons of security, as described further below ^ emergency ftm^ons under extreme drcum. 

This beacon operation is as follows: incoming commu- stances. This includes the event that the high-level user- 

nications signals are received throu^ foe antenna by the interface software is removed. That is. the low-level instruc- 

ccUular transceiver circuitry. This circuitry passes on tht raw ^^j^ are executed at a level in the computer at whidi the 

received signals to the protocol logic and data modem. TTie removal of the means of interpreting and executing instruc- 

protocol logic and data modem determine what type oi jj^^s would cause the computer to cease to function at all. 

signal is being received and hence which mode the beacon ^ jHefecred location for these instructions to be handled is 

should be opiating in. The wireless modes erf operation within the computer's on-board bios. In this manner, the 

include an incoming voice telephone call, an incoming fax, low-levd security features are made secure against tampcr- 

an incoming data modem call, or an incoming CDPD packet j^g. example they arc not iii^>aired if a tiiief erases tiie 

This information is passed onto the microfwoccssor which ^ changes an accessory board, 

determines what actions need to be taken within the beacon, ^^^^^ functions which are less 

and what signals need to be sent to the host conq)ulcr. Tht ^c passed by the miaoprocess<K to die user 

laptop computer preferably relays, or passes the mfonnaHon ^^^^ software. These codes may include signals that an 

to, the beacon intcrfocc software fot proccssmg. automatic transfer is taking place and that the user need not 

For an incoming vcace call the micropTOcessor alerts the be alerted, or codes for other such secondary functions. Jt is 

host computer via an interrupt other hardware notification envisioned that many functions which ideally would be 

route. The interface software detemuoes the appropriate executed by low-level security codes may in fact be required 

response dq>ending i^n the state of the computer and the to operate through calls to hi^er level security codes due to 

user*s settings. If the computer is in use, the beacon interface the constraints of the operating system. For exan^)le many, 
software may provide a visual indication that an incoming ^ if not all, file access functions may be dependent on the 

voice call has been detected and request that the user either cpo-ating system present on the hard disk. The removal of 

answer the call or pass it on to a voice messaging systeuL If the operating system would render any access to files 

the con^ter is not in use, an audio alert can be generated virtually impossible both for the thief and the beacon. This 

or the call passed on to an automatic messaging system. limitation may be avoided by protecting vital files automati- 

In the event of an incoming data or fax call the micro- 45 cally from being ronoved. When the beacon is activated in 

processor instructs the data modem to coimect and then theft mode it might disable all write access to die hard drive 

waits for the modem to produce data. Once data begins to be to protect the operating system, thus assuring itself access to 

received, die microprocessor tenqxirarily stores die data in the files which need to be transmitted. As long as the file 

memory and alerts die host computer. The host computer system ronains in place then the beacon can perform its 
passes die data to the beacon interface software which 30 tasks. The protection of die operating system or of certain 

queries the beacon as to what kind of data it is. Depending files may also be achieved in one embodiment by controlling 

on the type of data, an alert is generated for die user the file, permissions of each file to change certain files to 

displaying information about the data, its origin, and the read-only or archive status in order to protect them until 

leo^ of the transfer. For faxes and e-maiL ^iplications may transmission. 

automatically open for die user to view the data or to 35 Another type of incoming data is that of CDPD cellular 

immediately respond via the already established connection. packets. Sudi packets may contain e-maii pages, etc. and 

This conventional communications operation is altered might also contain low and high level control codes. These 

when the security functions become active. packets are examined by the microprocessor and passed on 

In that case, when an external communication is a post- to the user interface software, 
dicft call to initiate security operation, the ittcortung data call 60 Another function of the miooprooessor is to arbitrate 

preferaUy also contains low-level beacon control com- between incoming cellular transceiver data and the phone 

mands which are interpreted by the beacon pri(H' to the line interface. It is possible that the computer may be 

alerting <k' passing of the data to the computer. Such codes, plugged into a phone line and receive a cellular call at the 

for example, may be present in a header which the beacon same time. Several actions may have to take place. If the 
reads and strips before passing the remaining data on to the 6S incoming cellular call is a voice call dien die protocol logic 

beacon interface software on die counter. In a practical alerts the microprocessor which may signal the host coro- 

embodimcnt of one aspect of the invention these low-level puter and establi^ a connection. If die incoming call is a 
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cellular data calL the protocol logic tells the microprocessor With this <^atioiiiiiforniation system managers become 

whether the modem is already in use oo the phone line. If able to inventoiy the software and hardware configurations 

this is the case, since there is only one modem, a decision of all their company's machines, regardless of their location 

must be made whether to disconnect the phone connection at the time. They can also update software automatically 

and reconnect on the cellular. This decision may be preset by 5 overnight or provide realtime systems sujyort by logging 

user preferences in the high level software or may be set in onto the portable machine remotely and taking control of its 

the mitroprocessor itself. In any case only one data call can functions. A good use might be the collection and redistri- 

be maintained at a time. This limitation may be remedied by bution of shared database files at ttie end of the day such as 

the inclusion of a second modem in the beacon. The same with a program like LOTUS NOTES. In this case, the 

problem arises if the cellular modem is in operation and an database files would be transmitted by all mobile machines 

incoming call arrives via the phone line. Again the protocol back to a central computer, wtuch collates them and retrans- 

logic and the micn^irocessor arbitrate between the cellular mits updated database files to the mobile machines via their 

transceiver and the phone line. It will be understood diat cell modem beacons. 

incoming land-line calls can contain voice, data, fax. file Under normal circumstances the beacon functions as the 

transfers and security codes just as in the case of ceUular general communications provider for the host con^utcr. 

calls described above. computer is stolen however, the beacon operates 

The microprocessor also arbitrates and controls aU out- ^ concealed level as a special system controUo- and 

going caUs. Outgoing caUs from the beacon may be initiated broadcast beacon, thus providing the means to 

by fee user in a a)nventional manner through the user ^^^^^ iniportant data and track the stolen computer. These 

'^^'^''^^ 4''^'* for example by entcnng an e-mad and f^^^^^^^re implemented by the low-level security codes 

clicking SEND . or they may be mitiated m the higji-ievcl 20 , TT ' 

user interface software or the low-level security software desoiDea aoove. . , , ^ . 

automatically. When the miaoprocessor receives data from Bncfly» when the computer is stolen, the user determines 

the con^uter to transmit, it determines the most appropriate whether there are any critical files which must be recovered 

method of transmission and initiates a call. This detetmina- whe&cr the machine is found or not The user sends a 

tion may also be tagged in the higher-level software but must 25 broadcast to initiate transfer of these files. This is done either 

be agreed upon by the microprocessor according to the sUte through a central clearing house service center, which may 

of the beacon. In most drctunstances the micrtq^ocessor for example be operated by a coiiq>uter security compmy 

preferably is set to choose the phone line interface, if that provides broad-area RF/ccll phone coverage to receive 

present, for the outgoing call due to its generally higher and temporarily stwe such data, or through the use of 

bandwidth and lower rates of charge. If the phone line is in 30 additional software e.g., emergency communications s(rft- 

use by the user or another machine, the microprocesscr ware present on anodier machine. This additional software 

judges the urgency of the transmission and may choose to may be included with the user interface software for instal- 

eithcr wait for the phone line to be froc or to transmit the data lation on the users non-mobile computer and configured to 

via the cellular phone. If the beacon determines that the unit carry out automatic back up and other management fiiiu;- 

is not plugged into the phone line, then all operations are 35 tions of the mobile conq;)uter. In any case in a theft/ 

performed via the cellular coxmection. notification mode the user determines which files need to be 

The types of transmission possible are the same for recovered and a request in proper format is sent via the 

outgoing calls as those described above for incoming trans- cellular network to the l^top computo- with low level 

missions. Faxes, e-mails, files, internet connection and voice security codes. Upon receq)t of the lower level codes, the 

calls can all be initiated eitoer by the user or automatically 40 document recovery request is treated as a priority task and 

for transmission. Voice, e-mails and faxes, and internet the codes arc executed as soon as possible, resulting in the 

connection calls arc generally user initiated while automatic transmission <rf the vital files back to the owner. This step of 

transmissions may include some e-mails and some file the security i^otocol may be augmented by also carrying out 

transfers such as automatic back up file transfers, and the the destruction of this data on the laptop, for example by file 

security transfers described below. 45 deletion <x overwriting data on die hard disk. 

It is envisioned that the automatic file transfers will be The determinatioii of which files to send over the RF link 

useful for both emergency and non-emergency situations. can also be achieved through apjdication software running 

Non-emergency file transfers are transfers such as routine on the the annputcr without the intervention of the user. In 

back up of files either back to the user's home computer or this case, ^**en the computer determines itself to be stolen 

corporate network, or to a commercial data warehousing 50 cither through an incoming RF broadcast informing it of its 

facility for protective storage. The automatic back up fiinc- "stolen" status, or feroug^i one of the additional naeans 

tions determine which files to transmit in the same manner described bdow (Lc, tamper detecting senses ot software 

as f<x emergency file transfers, as described below, including tan^ detection), the i^lication software itsdf dctomines 

transfer based on modification date and type of file as which files need to be transmitted. This determination may 

determined by the file extension, as weU as any specfic files 55 be based on tfic type of file as indicated on an MSDOS 

or directories specified by the user through application system by a three letter file extension, or based on the date 

software. It is envisioned ftiat a certain user might for of last modification, ot the directory under ^ch the files 

instance desire to back up all word processing documents were contained, or by a combination of these methods. For 

every three days automaticaUy, whether connected to a example, the computer might send all word processing files 

phone or a network or not. If there is no other method 60 with the file extensions ".TXT or DOC* whidi have been 

available at the time, the back up software then conqicsses modified since the last automatic backup, 

the files to be backed up and sends them over a dial-up The security functions described above may also t>e 

connection using the cell nKxlcm. Preferences may be set as activated automatically through internal means present on 

to when the transfers would take piacc so as to minimize the the conqniter rather than through an RF signal In accor- 

calling charges. Other management functions arc available 65 dance with this aspect of the invention, sensors are provided 
through the use of additional software and the cell modem that detect various physical paranoeters related to the oom- 

beaoon. puter such as when the case is being opened or when the 
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antenna or various pieces of the intmial hardware arc TDMA and the pager reception is synchronized with a syodi 

rcnK>ved or tanspmd with, and the detected sensor states signal to turn on during its designated message interval. The 

actuate the security logic to set off the various security data it receives, e.g. several message words or more as the 

features of the beacon. When these senscrs detect unusual technology peimits. is passed to the activation logic 206 

activity such as removal or physical tampering with a lock. 5 which in this case corresponds in part to the security logic 

switch, board or antenna, the security logic identifies an function described above; it con^}ares the beacon ID number 

alarm condition and actuates the beacon so it performs such to the received address or may determine if an additional 

actions as erasing the hard drive, calling for help, transmit- message designating a "stolen** state is received. It then 

ting important files or the like. In addition to hardware performs one or more of the transmission and internal 

sensors, specific applications running on the computer may security actions described above. 

be configured to activate tiie beacon, for instance, when they Specifically, when the received pager message indicates 
detect unusual activity such as a failed password entry, an theft, the activation logic may pass an output actuation 
attempt to access a database, or an impropa attempt to start signal to immediately initiate low-level or bios security 
the counter. functions, and also activate transmitter 20ft to t^adcast the 
The beacon may also contain its own back-up battery to j ^ id number stored in ROM 210. In general, data reception 
enhance die ability of the beacon to operate when power to capabilities of this embodiment may be limited, but the 
the main computer is removed or run down. Preferably, pager-based beacon may also receive designations of files, 
when the beacon has received a security code indication, the and may include <»- interface with a simple security control 
beacon communications handling section is set up to rec- unit to effect ttte disabling, selective erasure or file encryp- 
oguize and ignore non-important incoming calls which 20 tion operations described above for securing data. A second 
require e3q)enditure of too much power or which are of a antenna 60d may be (Hovided for the pager transmitter 208 
type that could not be handled without the use of the higher if necessary for a distinct transmission frequency; the pager 
level software. These incoming requests are simply logged antenna(e) may be distinct firom that of die cellular phone if 
to be handled at a later time. Some low-level security codes one is (sesent in the lig>tap. The ID may be sent out in the 
may also be stored in menKiry and either executed imme- 25 pager transmitter's call-received acknowledgement 
di^y or executed immediately upon the powering cf the protocol, confirming reception of the ^'stolen*" message. To 
host computer. This prioritizing ai^>roach to post-dieft con^ aid in the tracking process, a GPS receiver may be included 
municadon assures that the critical data recovery or security in some embodiments and the transmitter may transmit its 
tasks are implemented before the laptop power pack position coordinates; a separate transmitter or a pager trans- 
discharges, or that crucial tasks are identified and settings 3^ mitter configured to transmit these few additional data words 
made to implement the tasks as soon as die battery is again may be used. 

charged. The invention thus constitutes a built-in communications 
Finally, as initially noted above, in a prefezred embodi- apparatus which operates from the l^tc^ power supply both 
ment of a system of die invention, the signals transmitted by to detennine when the laptop is stolen and to implement data 
the cellular transceiver are externally tracked to determine 33 security actions to recover files or prevent loss of infoima- 
the location of the coni^uter for recoveiy the computer tion. Fteferabty it includes logic which operates on system 
hardware. This may be done by determining what cell of a inputs as well as user transmissions to undertake both 
cellular phone system the beacon is currently located in, machine-Initiated and message-responsive measures, thus 
which in the case of cellular communications is a piece of assuring data security or recovery under all circumstances, 
information automatically derived by the system 40 Fuitha by operating with low-level codes and a beacon 
management and then either triangulating its position or integrated with the mother board it ^ectively prevents a 
tracking the beacon with a mobile direction-finding unit To stolen conqniter from being easily modified for sale, and 
conserve battery power, the non-data transmissions intended assures that the computer is trackable. 
for tracking may be programmed to occur only in response WhDe the invention has been described above in connec- 
to an incoming request or notificaticHi, or may be broadcast 45 tion with specific embodiments and alternative 
at disCTcte intervals or at prearranged times. Thus, accoiding irxqpilementations, modifications and variations thereof will 
to this aspect the invention contemplates a cellular beacon occur to diose skilled in the art in the light of the foregoing 
which operates intermittenUy for tracking, and which scfaed- description. In particular, while the beacon has been 
ules or announces its intended time of operation in order to described in relation to the management of laptop 
conserve power while assuring that a recovery or tracking 50 computers, it is also applicable to control or monitor any 
force can efficiently direct its efforts to definite broadcasts electronic device such as a PDA, a movable piece of 
and intervals. industrial electronic equipment and the like. In addition, the 
The invention may be inq}iemented in a number of beacon need not contain all the functions described, but may 
embodiments, and while the above description sets forth contain only a subset of these functions. For instance the 
detailed modes of operation for a cellular phone embodi- S5 beacon may contain only a receiver which accepts security 
ment for which a transceiver and cell modem are available commands and operates as described to overwrite files or to 
for communication, odier embodiments may be inq>le- shut down or restrict operation oi data devices in the laptop, 
mented wittiin the constraints of other communications <^ it niay have only a transmitter which is activated auto- 
links. Thus, for example, an RF pager-based system may matically by the con[^)Uter and transmits out files and 
receive its actuation signals, and receive messages desig- 60 tracking signals. While the preferred embodiment has been 
nating actions to be taken or identifying files to be secured- described as a system operating within the AMPS cellular 
e.g. erased or encrypted- and may transmit its ID or a phone network, o&er embodiments of the present invention 
tracking signal via a pager or other transmitter. may operate under GSM, PCS. Paga. Satellite, LAN. or 
FIG. 6 shows such a system 200. In this embodiment the other wireless communication system. Accordingly, the 
RF signal in an antenna 60 is demodulated and amplified by 65 invention is Intended to embrace all such alternatives, 
a receiver 202 and tiie demodulated transmission is fed to a modifications, variations within its spirit and scope, as 
protocol decoder 204. Briefly, transmissions are effected in defined in the following daiois. 
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What is claimed is: 

1. A security system for a laptop computer of the type 
having a processor and a power supply with a memory and 
applications programs for data handling, such system 
including a beacon containing at least one of a recdver and 
a transmitter, security logic for determining when the laptop 
has been stolen or tampered with, and security means in said 
beacon responsive to a determination by the security logic 
for selectively controlling elements of said laptop computer 
to secure data stored therein, wherein said security means 
includes means for removing said data firom memory and 
transmitting said data. 

2. A system according to claim 1. wherein said security 
means includes means for selectively disabling access to or 
operation of said memory. 

3. A system according to claim 1. wherein said memory 
stores data files and said security means disables con^uter 
access to at least a portion of said data files. 

4. A system according to claim 1, wlierein said security 
means is operative to initiate a trackable RF transmission by 
said beacon and also to selectively disable higher function- 
ality of the l^top computer thereby assuring that battery 
power is applied first to a security transmission. 

5. A system according to claim 1, wherein said security 
logic fonns said determination by f^ocesslng an authoriza- 
tion code entered by a user to thereby initiate selective 
control of said elements in response to unauthorized use of 
said computer. 

6. A system according to claim 1, wherein said beacon 
operates in conjunction with applications software to nor- 
mally back up files via automatic transmission to a host. 

7. A system according to claim 1« wherein said beacon 
includes a receive and a transmitter, and said system further 
comprises a data modem, wherein said security logic 
receives information in a transmission to detennine that the 
laptop has been stolen, and thereafter controls said elements 
to effect recovery of at least one of said data and said laptop 
while conserving power in said laptop. 

8. A system according to claim 1. wherein said beacon 
includes a receiver and a transmitter, and said system further 
comprises a data modem, wherein said security means 
receives information in a transmission to identify data files 
in memory, and thereafter controls said elements to secure 
said data files. 

9. A system according to daim 8, wherein said security 
means secures said data by performing at least one of 
encoding, erasing, overwriting, hiding and transmitting out 
said data. 
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10. A system according to claim 8, wherein the security 
logic conmuinicates with the processor and calls bios to 
execute a security function so as to inq)lement said function 
despite tampoing with higher level features of the system. 
5 11. A system according to claim 8, wherein said beacon 
transmits the identified files to a host. 

12. A system according to claim 11. wherein the beacon 
further coordinates a transmission time with a tracking 
receiver to thereby conserve battery power as it effects 

10 security tasks. 

13. A security system for a laptop counter of the type 
having a processor and a power supply with a memory and 
^plications programs for data handling, such system 
including a beacon, security logic for determining when the 

15 l^op has been stolen cs tan^Kred with, and security means 
in said beacon responsive to a determination by the security 
logic for selectively controlling elements of said laptop 
computer to secure data stored therein, wherein said beacon 
includes a receiver and a transmitter, said system further 

20 comprises a data modem, and wherein said security means 
collects files for recovery, and thereafter controls said ele- 
ments to compress said files and transmit them to a host 

14. A system acccsding to daim 1, further comprising a 
physical sensor for detecting physical tampering, and 

25 wherein said security logic responds to the physical sensor 
to form said determination of tampering. 

15. A security system for a laptop computer of the type 
having a processOT and a power supply with a memoiy and 
applications programs for data handling, such system 

30 including a transceiver and data modem, security logic for 
determining when the laptc^ has been stolen or tampered 
with, and security means in said transceiver responsive to a 
determination by the security logic for selectively control- 
ling elements of said laptop con^Hiter to collect data files for 

35 recovery and transmit them to a host. 

16. A system according to claim 15, wherein said security 
logic responds to at least one of a physical sensor, a message 
received by the transceiver, and an applications i^ogram to 
determine that the Iqitop has been stolen or tampered with. 

40 17. A system according to claim 15, wherein said security 
means calls bios to disable elation of the l^top at a levd 
that prevents access to data therein. 

18. A system aco^ding to claim 15. wherein said security 
means resides in a tanq)er-proof package coupled to said 

45 processor such that removal of said package disables opera- 
tion of the laptop. 

***** 
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